Wechat Qwen Reply

• Analyzed: May 11, 2026, 7:44 AM
• Findings: 1
• Version: 0.1.1
• Hash: 50fdb749573204e7a30bc1fb68eb83fc3499f0806ecf41b9200120adb5b8d906
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill contains hardcoded absolute file paths to a specific user's directory (C:\Users\chenxun), which is a significant privacy and portability concern. It utilizes PowerShell with a 'Bypass' execution policy to capture screenshots of WeChat conversations and transmits this data to an external API (dashscope.aliyuncs.com). While these actions align with the stated purpose of chat recognition, the combination of environment-specific hardcoding and automated screen capture of private communications in scripts like qwen_vl_read.py warrants a suspicious classification.